allowing multiple Auth-Type in authorize file