new field to User

add new field ‘authorization’ to User