got rid of ensure authenticated user