2-way authorization