views now follow the new auth rules