removing unauthorized! in favor of authorize! and including more information in AccessDenied exception - closes #40
