Authorize with SQL and not authenticate