authorization added for users/sensors