Refactored authorization methods to only make one db call total