urls and templates with authentication