changed require login in to ensure logged in