Including the login page is nicer than redirects