users working correctly with correct authorization