login-required method implemented