authorization and API changes