loads authorization page directly