add authentication to inside pages of bcfa