add an audit log for authz