add user authorization