add isAuthorized check before making a call