fix layoutPath in authorize controller