add additional authorization handling