finished authorization stuff