require login changed for index and show