add nav, tests to ensure things require logged in user