main: show content only when logged in