loginauth on most pages
settings auth