require login on appropriate pages