add security

Disable access from url to welcome page