Put the apiHost where is belongs, in the authorizer.

Signed-off-by: Mike Gehard <mgehard@pivotallabs.com>