authorize

beginning frame work of authorize web page.
_sites does not matter