changed so it is the logged in user that can read messages

non logged in user gets sent to login page