Update authentication, add authorization