added more authorisation features