user authorization and views