fix use of accept in onAuthorization