add authorization and index with pagination