authorizedUsers is now an array