location must

and clear authorization optional