added force login to must_be_logged_in permission