adding user authorization in request