Always check that user is logged in before checking specific permissions