moved nav-based auth check into navigation