changed authorization.rb to use the proper inheritance for BaseController