small protections on user not being logged in