adding authorization for new users