show only auth tab if not authorized