complete authentication so views depend on authentication? method in server