add check_authorization