Forbid anonymous users to access any pages besides login.