require login to access application controller