show key only if logged in