allow object to be passed in authorize