moving Authorization process to a proper class