added some authentication to views