added authorization logic
implemented authorization in existing methods