switch to `authorize_resource`