searching should require being authenticated