pass along session_info to is_authorized