brought all authorizations into line with new architecture (except Core Location, which works differently)