refined activity related models
add authorization and authentication policy to config