removed isLoggedIn, user must log in everytime