Change endpoint for authorization to plural so it matches with the backend and restful convention