covering userAuthorizationParams