removed user/* from the list of secured pages