create CTFRequest class for authorized requests