remove `authorize!` on `receipt`