next steps for authorization