some debugging of authorization