show favorite button only when authenticated