added mybatis and rewrote the main authorization method