Hello.
How close all pages for non authorized users and open only index action in index controller?
Have a look at Vokuro (Github Repo)
It implements authorization and authentication. Setting up the ACL is very easy in that example.