secured index - login needed