Added the Authorize attribute to all controllers