require site-wide sign-in