removed login required decorator for now