authorization, pagination, minor ui and api fixes