refine submit and view, donot show page when not auth