small tweaks. white icons. authorize filter in app controller