fixed model authorization with areas