Loading default AuthorizationsProvider outside SPI process

you might be able to match on the length of providers...
```
provides.length match { 
  case 0 => new DefaultAuthorizationsProvider
  case 1 => providers.head
  case _ => throw new Exception
}
```