config panel only visible to authenticated user