add login control before order