Add function: restrict some access who are not logged in

add not_logged_in.js to create route middleware. it should be test.