require login, show only sheets related to user