Fix authorization for GET methods with params