authentication for views working