authorization

Limit authorization of users based on their auth