Customizing request authorization