form being rendered properly based on user credentials