Renaming IndexController to MessageController
Removing un-necessary and() call
changes to include authorization definition to URLs