authorization challenges diagram