better name for variables in AuthorizeController