no creating users if not logged in