added method for checking app authorization without requiring a token