add authorization to parameters