added test for protected page access