added extra authorization step before subscribe