auth
turn off heatmap
allow users to turn on heatmap