implement + test authorize call