add login_required for products and make it works