implemented simple authorization