view + auth