basic flow to check if the user already authorized the application