set it such that users need to login before start