Removed authorize_application redirect from middleware.
Will instead occur in the decorator,