add simple authorization