authzid should have been optional