removed authorized flag as all requests must be authenticated since they start new connection