require login for all views, add login and change password views