Kidong: prevent accessing staff page if user is patient