allowing (custom) authorization to occur even when user login is not logged in #304

Closed DavidZey closed 8 years ago