You shouldn't have to update all 30 pages. You would likely just have to make sure the login page saved the same session variables. The other pages would not need to be updated. If I saw the login page and the security rule I could likely tell you what was missing.