* show_status doesn't need login