same url for logged in & not logged in