force isAdmin function to check isLogin first
make dir: doc prohibited
use doc.php to retrieve pdf(s) from doc rather than directly access by hyperlink. in order to check the authority of audience.
if the task is hidden the pdf is hidden.
Merge branch 'master' of github.com:phizaz/otog