Added authorization attributes to controllers

[BasicAuthAttribute] (from CustomAuthorization directory) now denies
access to every controller except Home for users who are not logged in.