FIX: Resource pattern matching for authorizations

even if:
- the ID is not in the 3rd segment of the path,
- a query is added to the URI.

Now:
- `authorize` must be used instead of `AuthorizList`.