re-subscribe on login so permissions are rechecked