[IMP] : authorize controller url