What is the best way to authorize the user since the action is carried out before redirects in transphporm.are carried out?