check logged in on all rest calls