add login requirements to most views