requires authentication catches 403s and redirects
add temporary logging solution