rename ensure_signed_in to authorize