add authorization plugin