implemented authorization for specific pages