added authorization.rb file