authorization on private playlists