page: authorise user logins at page start