The check_policy function exists in api utils, along with other more
complex policy utility functions. This change replaces direct calls to
authorize with calls to check_policy.
Having authorize calls consolidated in api utils may help with the
upcoming secure-rbac work.
Change-Id: If4779b08b9f360f4c2f4675c605aa519f6ea4778