forgot to remove one of the login required decorators