changed url for logging in from user to my-account
allow users access where access_level =1 if they are inside rL