added simple authorization