finish authorization