almost done with my own authorization, to test