added logic for not letting unauthorized user to view sensitive part of the system