restrict access to the page