fixed authorization issue with master_bracket and logged in only controllers