move force authentication check to a view