removed @loginrequired