requires login & all functions well