Moved authorization from the server to the traffic controller

Signed-off-by: Maria Shaldibina <mariash@pivotallabs.com>