added authorization framework, now selects files