Tell me about authorization and authentication in the project. How do these two concepts differ?