Fixed authorize methods to handle non-logged-in users