added authorization for specific user pages