use correct syntax for authorization