Add default authorization

otherwise, by default web portal doesn't allow anything