change authorization strategy from local to basic