add authorization
add logout