use authorize! to fix the security issue
Merge branch 'master' of github.com:catarse/catarse