finished authentication now doing authorization
finished authorization
updating with jon's authorization