Handling authorization requests