added secret_page to test authentication