non signed in user prevented from accessing