Authorize route takes both post and get.