fix controller method names
- they're not the same as route names; confusing, yes...
the only time we need to skip :authorize is during #registration_status
Merge branch '1.0.4'
- fix authorization issues