required login
added login for destroy