use internal function for authorization loading