Move authorization adding from userService to authApi.updateUser. It updates authorizations and profile info now, and get rid of legacy modMap and keys attributes