add authorization and recover form