add some authorization stuff