basic authorization handler, ui tweaks