changed authorization implementation to regex
authorization subject/command names can be reversed
cleanup