non-admins can now browse