pretttttyyyy sure that now users can only access what they should be permitted to. if not, sends them to login screen with error