Prevent non-logged-in users to access settings page