fixes #3492 - API v2 nested routes for each controller
fixes #7584 - add Authorizable module to class AuthSource