Authorize plugin should expose `optional` settings

[malekjaroslav]

It would be great if fieldAuthorizePlugin exposed the optional settings. That ways user can decide if authorize field is required or not.

fieldAuthorizePlugin({
   optional: false
})

[filoscoder]

I'm just experimenting with fieldAuthorizePlugin, and just found this issue. What kind of issue do you get with this plugin?

I didn't get any complaint saying the authorize field is required.

[Dremora]

@filoscoder that's exactly the point - it would be nice to make it required. It's easy to forget to add this on a few field, inadvertently exposing it, which would be a security issue.