add authorization to pages where needed