Add controller restrictions for checking user type