authorization returns UNKNOWN_USER state now