turned on authorization control
added per_page constraints