Require authentication on inner form page