before adding authorization