added authorize in search controller