add authorized response handler