restrict user from accessing unauthorized pages