added some security on tenderView page