made wishlists require login to view