authorize! can be called any number of times