Retro fit authorize route with tests and add in test for no access