added some authorisation to angular views