add login protection to site