closes #2291
only for logged in users