Fixed bug allowing certain states to be accessed without sign-in