Remove authorization from our authentication gem.

Originally I didn't like the idea that our authentication lib was also responsible for providing authorization. Now that we've ditched the ability stuff in favour of policies all the authorization cruft can be removed.