App authorization router