cleaned up authorize_user for ocorrencia controller