Use Authorization object for Authorizations dashboard page

Use authorization instead of un-expired tokens. Also add revoked_at and scopes to authorization object.