added private meddleware, prohibits access for non-authenticated visitors.