requiresClientAuthorization