added experiences scaffold and check to ensure authenticated users only can access