add authentication and show/hide elements based on logged_in?