putting the user access decorator in the correct place