user authorization fix