working through some user authorization