adding access to sensitive areas after login