How to create an authorization object