user can see detail after auth