Secure Context-sensitive Authorization