authorization almst done