support app-level .authorize() function from feather's auth sub-middl…

...re layer;

this makes is a little nicer to share auth rules from feather to the app layer;