only show submit link if user logged in