user stays LOGGED IN (added next() statements) need to restrict access to table