add auth check, update index.html