Move some auth from application controller to base controller