add authorization
hotfix redirection