Move isAuthorized logic to mvIdentity