added mild authorization so you can't fill out forms unless logged in