"not logged" protection to prevent direct access