modified sample authorization to remove tokens