denied page is now using the main layout...