tweaked authorization prompt