don't allow non-logged visitors to view site at all