pass authorizer class, not instance