Remove some more unused arguments
Change js authorizations to arrays

They had no need to be object maps, and this is faster on both sides.  A
little related js cleaning.