require login for every page
model changes