fixed authorization matrix setup