add authorization hooks to router classes