add authorization and page header