add a protected page only visible to authenticated users