no need to check if the user is logged in