Issue #28 - authorization check in messages