Refactor authorized scope in controllers