auth page added, handling unauthorized error