block actions on product if not logged in