create protected page. limited access to some page