Added authentication before action to cards controller