moves include of needs_authorization to initializer