remove Authorize attribute

Having the authorise attribute on the home controller prevents xrds requests from succeeding.
Merge pull request #8 from pete-kirkham/patch-1

remove Authorize attribute