requiring a user to log in to do certain actions