don't show buttons if user isn't logged in