redirect to login page when /admin is requested