Finished customer and employee authentication with custom authorization attribute