can't access user page without being logged in