Authorization done right