divided authorize response into two distinct controller actions
removed obsolete indexAction
client auth info now contains clientId