revert changes in authorization.rb