authorization tweaks