set "description" for employee login
when accessing unauthorized page, redirect