added authorization and user list page