authorization checker works now