if user is not logged in return false