I've setup the frontend user module all okay, I have created a user and they authenticate fine.
The problem is when they login successful they get sent to this page: index.php?page=staffpage
Which is all cool, but even when they are not logged in, I can still do a search for a term on that page and get indexed ( disabled cache on that page) and I can access the page by typing the full URL ?
Help really needed

thanks