simplify authorization