Add login function. Require login to view request list, but individual requests are ok