get/save user decision callback

The idea would be to relieve the `authorize` view callback from making api calls and just focusing on rendering a view and having a couple of extra callbacks that would allow consumers to get/save the authorization decisions of the users. In my mind it makes sense. Let me know what you think, @timshadel.