add belongs to association to authorization