Added test for restricting access when not logged in