authorization support on CONNECT

I think it becomes more useful.