making sure user is signed in before looking at attrs