add functionality for authorization