Add authorization rules to Score JSON API