Authorization

Added basic role authorization to app controller and users controller.