authorizer
namespace should be per user