What's make authorization hard, and how to get it right | Dark Hacker News