Add authorisation to cancel req