Moving Authorization Out of Your App Code: If-Statements vs. Cerbos vs. SpiceDB