Use Authorization Core and Authorization Extension Together