can only post, view, and update when logged in