moving authorization to a dummy decorator