simplifying authentication and authorization