add ckan api authorization functions