Only browser page requires authorization