Prevents direct access to view JSPs (should be done in controller)