Update versions.json
Change session key name
Update session var

Session var now takes object with route. params and authorize
Set controller state

When rendering template in-place in authorise hook, set controller
state var authorized to false to indicate authorization failed and not
authentication error.
Version bump