make sure newreaction page unaccessible to unsigned in user