Authorization for both methods