added authorize controller methods