added authorization for resources