fix template path for authorize controller