move authorize user access functionality out of base class
fix tests. bump version