Dont authorize invoice directly in controller.

Solves subproblem of https://github.com/kaspernj/awesome_tasks/issues/72