protect pages by user login status 7