Use session or file to store authorization value