adding additional authorization to the authentication