page viewing, no authcheck