auth checking on page factories