mandatory sign-in