add auth to all pages that will bounce others out