delete check_authorization statement, so login in page can be showed