Changing authorize attribute to support roles or usernames