reverts changes to assert_not_authorized