enforce authorization in coffeeBtn