users have to be logged in for all but landing, signup, and login pages