support app-level .authorize() function from feather's auth sub-middleware layer;
this makes is a little nicer to share auth rules from feather to the app layer;