Add tests to ensure we are using authorize attributes Also clean up non-compliant and deprecated methods on PoliciesController.