Authorize user callback removed from application controller