UI: don't show notifications unless authenticated