added resource authorization