Added HTTP request to the authorize method

This was added to support a requirement for checking against a database which server URLs a user has access to. It has already been sent as an issue but I wanted to commit my changes, and also share them.