removed refid from Authorization and reveal of user id and password; added prepopulate of authorization time periods to 0