Changed authorization to handle the rules as regexp patterns instead of exact matches