trying to get deny authorization request working