enable user login/logout
require login on results page