These patches affect SimpleAuthorizer and GoaAuthorizer.
@debarshir Do we need a unittest for GoaAuthorizer? It makes sense to do so, but I don't think we must make extra code such as new-ing GoA object to pass to the parameter of the authorizer for only testing autoptr.