remove cache; add login_required to the viewer