Added authorization to controllers