changed the way authorization works