user authorization
before exercises (also added sample_app_commands.txt)
chap 9 exercises