authorization window added