add some authorization checks to the Wiki