do not load user page unless a user is logged in