access rules added, so only the loged in users can do something interesting