currently, if someone who is not logged in visits the URL, a 403 Forbidden page is shown to them