Returns the response object instead of true/false from Authorize
Loading user and access_token from security.context