authorize subscription requests to realtime endpoint