Completed initial work on authorization

* Forwarding works with for=URL