add authorization, friendly forwarding