added custom authorization attribute