Add authorization checking