Moved notLoggedIn to included/

Also made directory included/ forbidden by http requests