Fixed authorization flow