Pull out authorizer

This will allow us to test complex auth logic independently.

Signed-off-by: Glenn Oppegard <goppegard@pivotallabs.com>