working through the authorization