Add authorization check