minor changes to authorization permissions as I work on it