Authorization: fix some issues in xhtml pages