added authorization, specs