add authorization exception handling