Now looks for preexisting authorizations

Has a bit of a timing error though. The list of authorizations has
cache headers and also might be eventually consistent.