fix authorizations, change s redirects to get rid of message#show