Inject AuthorizationService in assertions

As discussed in #157