backend auth protected
ui fix