add page access control via login