added return type to authorize