Added security to prevent direct access by url