Not allowing to use parameter "javax.faces.ViewState" is user is not
logged in