authorization added in application controller and in before action for p...

...hotos