forgot the authorize function in the doc