add authorize setting