removed authorization from application controller
removed authorization filters from controllers