A user could access any page if they knew the URL without authenticating. Users are now redirected to the login page if they try to access another page without being logged in.
This patch requires that the User roles, PUA and RLS patches be applied first
James