Restrict direct access html page