Authorization works! Ugly, but works