remove the last 2 [Authorize] (which malfuntions)

use SecurityService instead of [Authorize] in all places instead of all
but 2.
and some cleanup