Authentication#authorized? now uses map_rights, which should be much faster than all_rights.