Add authorizations support

TODO: 

* More tests, specifically uncomment the `xit`s