add authorization
add users index page