add security trait, to verify logged in