Move authorization into it's own file