added authorization plugs