adds authorization --non-admins can't be trolls