Proposed authentication and authorization improvements