What's make authorization hard, and how to get it right | Hacker News Reader