add login page and set login to required