authorization working with codeword