Feature/authorize apps

make this into an instance variable