Resolved Issue #2

Moved authorization to controller::init() and out of the action level.