added authorizeRoute