Add authorization from scratch using current_user and authorize methods