refresh sidebar on login
indicate editability in sidebar
forbid all changes when logged out