Use correct authorization/auth for non mixin resources