Why do we need both isAuthorized and authenticationRequired? They seem to serve the exact same purpose.