fixing authorization with jaxrs 2.0