how can I prevent access to the website if the user has js disabled?