get rid of AuthzTemplate; move some Authz related methods to authz.go