added authorize helper method for restricted access