There's a difference between authentication and authorization.