add server.authorizeForward method