Added HTTP request to the authorize method so the request URL and method can be checked against a user's access permissions