API ReturnAuthorizationController fixes