Add another authorization step