Access is checked on the server. Candidate information is never rendered before authentication.