adjusted authorization handler