make sure only signed in users can view uris