fixed session baracade in secret page route