fix(authorization): handle action parameter in GET/authorization