fix cmd page and add user auth