fix authorization in migrations