adding authorization to the authentication