1) authorizaion check 2) "approve" page(50%)