browse _GET is public, there should be a separate interface/page that a user is taken to when they log in