small changes to authorization