bugfix so protected page actually displays something