create a mixin, and make sure save function calls doAuthorized