added auth and 403 error page