added some initial authentication protection to user pages