prvents unathorized access to website