ask user to authenticate on all pages
ordering