limit access of non-registered user