Restrict access for users who have not logged in