fix(authorization): handle action parameter in GET/authorization

Fixes #54.

@seanmonstar r?