add login required for controllers