menu - show dynamic menu only if auth