fix homepage authorisation