enforcing that users be logged in to access site pages