diff --git a/src/dotnet/QuantEngine.Web/Client/Pages/Collection.razor b/src/dotnet/QuantEngine.Web/Client/Pages/Collection.razor
index 0914e8a..1c70cfd 100644
--- a/src/dotnet/QuantEngine.Web/Client/Pages/Collection.razor
+++ b/src/dotnet/QuantEngine.Web/Client/Pages/Collection.razor
@@ -1,4 +1,5 @@
 @page "/collection"
+@attribute [Authorize]
 @using QuantEngine.Web.Client.Services
 @inject ApiClient ApiClient
 @inject ILogger<Collection> Logger
diff --git a/src/dotnet/QuantEngine.Web/Client/Pages/Dashboard.razor b/src/dotnet/QuantEngine.Web/Client/Pages/Dashboard.razor
index 532b478..d22ffce 100644
--- a/src/dotnet/QuantEngine.Web/Client/Pages/Dashboard.razor
+++ b/src/dotnet/QuantEngine.Web/Client/Pages/Dashboard.razor
@@ -1,4 +1,5 @@
 @page "/"
+@attribute [Authorize]
 @using QuantEngine.Core.Infrastructure
 @inject HttpClient Http
 
diff --git a/src/dotnet/QuantEngine.Web/Client/Pages/Operations.razor b/src/dotnet/QuantEngine.Web/Client/Pages/Operations.razor
index a93a201..9e44e3f 100644
--- a/src/dotnet/QuantEngine.Web/Client/Pages/Operations.razor
+++ b/src/dotnet/QuantEngine.Web/Client/Pages/Operations.razor
@@ -1,4 +1,5 @@
 @page "/operations"
+@attribute [Authorize]
 @using QuantEngine.Core.Infrastructure
 @inject HttpClient Http
 
diff --git a/tools/validate_gitea_token_home_v1.py b/tools/validate_gitea_token_home_v1.py
index 2303ba4..f58ff83 100644
--- a/tools/validate_gitea_token_home_v1.py
+++ b/tools/validate_gitea_token_home_v1.py
@@ -29,6 +29,7 @@ def _request_json(url: str, token: str, method: str = "GET", body: dict[str, Any
     headers = {
         "Authorization": f"token {token}",
         "Accept": "application/json",
+        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
     }
     if body is not None:
         headers["Content-Type"] = "application/json"