isAuthorized works as expected.