dont let non-members change stuff
more security stuff