replace old auth with new_authz