Seperated custom authorizer and authenticater