users must be signed in before creating a wish list