only auth if user + got rid of unused pages ctrl