revert authorization.rb