Authorize after authetication