User connection state is kept with "loginService" service. Url are protected. Access has to granted to connected users