it's set in @login_and_domain_required, etc