[Authorization] Authorization provider should accept AuthenticationDataSource rather than a string role token

[sijie]

Problem

Most of the methods in AuthorizationProvider take AuthenticationDataSource for authorization decision. However isSuperUser still takes the string role token. This has to be changed.