updated controller logic and view logic to block users from seeing things they shouldn't