finish with authorization and authentication