Decouple Auditable from Authorizable

A new class has been introduced, PendingAuditable, which mixes Auditable and
Authorizable toggether in a cleaner way.