Make authorization logic clearer

- Taken from meteor-voltage