refresh authorizations