home page is login, and all pages locked down to logged in users