flattened authorizations panel to edit-view with proper action permissions
fixed missed authGrant model misassignment; expiration field behavior limits properly and more nicely