Created file alreadyAuthenticated.js to check if the user is already authenticated and not allow him to access some urls. Removed 'required' from is_admin, because by default it is set as false. Added the links between controllers and policies.