moved ui middleware to separate module; moved authorization route/middleware to oauth module.
POST /authorize request validation middleware