loginrequired mixin added to some private urls