working on authorization checker