Prevent state change until authorization
Don't stream unless logged in