Add UsersController, CustomAuthorization attribute and Unauthorized page