working towards better authorize UX