Authorizing requests on a persistent connection