checking authorization in the duration of connection