Set authorization for controllers without direct relation to a Model. Added specs