A user could access any page if they knew the URL without
authenticating. Users are now redirected to the login page if they try
to access another page without being logged in.
This patch requires that the User roles, PUA and RLS patches be applied
first
James