only return results if the user is logged in