deny and allow page of a health tracker app