* locked down admin pages
* locked down pages that require a logged-in user
* created generic error handling page