remove Authorize attribute

Having the authorise attribute on the home controller prevents xrds requests from succeeding.