authorization.rb merge free_uri? and authorize_exceptions?