Step 3 – Adding the [Authorize] attribute