require auth for search page