working on page authorization