authorizatin: requiring logged in users
requiring the right user