login_required now verifies ticket