Implement authorization, with one [null] backend