user must log in to view the catalog