making sure someone logs in before displaying anything