How to unprotect pages with query strings in the URL?