add ensured login to applicable controllers