fixed: routing priority (authorize)