(bug #4004) disallow access for non-logged in users in opac