Fix authorisation on index