only show buttons if logged in