Hide links when unauthenticated
Correct login redirect
DataModel.all should return lists only