Add @authorize_with to controller/api declaration.