extend story model
refactor authorization