refactored AUthorization backend, updated the doc