blocked character urls when logged out