Made all urls login-only, for now