add login requirement to contacts controller