add authorization checks
add authorization checks