move authorized method to sessions helper