requires all users to be signed in before using