removed restore from session from authorize() method