authorization, tons of UI bug fixes