Allow GET/POST to authorize instead only POST

To allow authorize an already authorized user and don't show again the authorize html and have to do a POST again.

Change the decorator authorize_handler to verified the return value from decorated function. If it's a boolean use the old 'POST' flow else return the returned value