Changed to take 'params' object in 'authorize' method.