logged-in users cannot get to the login or register pages