Authorisation using secret keys works