added authorization and associations