differentiating between authorized and non-authorized users