add authorization to sites