authorization and protocols lecture 24 315917