Return the app in the authorize_user function
Add authorized origins to the application schema