Fixed security hole. That allows the access using direct url path