only show menu when authenticated