enforced sign-in for users