add user authentication to some views