updated authorization in the view to view 'Patients' link