better authorization handling