First shot at gen_server calls between components. only authorize implemented so far