add authorization extension
0.2.27
more work with the authroization module
bypass super role
0.2.28