added prevent direct link if not login