Fix _authorized? params bug - it should pass nothing to methods.