adding authorization checks to the app and authorizing submissions