Added the authorize on the before action