authorization method modified