added user authentication so that everything is actually secure, even wh...

...en people mess with the urls