improve layout
add authentication for sensitive urls