Iteration I3 complete: added authentication for all pages except whitelist