The page should be restricted regardless of how you access it. Since it is a server side restriction that is in place so long as the session is maintained you will have access to the page. The page should not be accessible to someone that does not pass the rule regardless of how they access it. If you want to ensure that the session is terminated you would need to close your browser after you are done or make sure to logout. Please post back if this is not what you are experiencing and describe some more about the problem.