user pages authorization (close #19)

Signed-off-by: Sergei Ianovich <ynvich@gmail.com>