Refactor controllers by create a before_action for authorize_model