adding loggedIn policy; basic login page