fix authorization to allow new owner sign up