users need to sign in to see protected views