added missed authorize controller.