lesson links should require login. fixes #22