added restriction that requires log in to view any part of the app