some stuff around authorization