updated user authorization and response persistence