users not logged in can see user 1