I don't think we want to prompt for login here - this will trigger a login popup in the browser. Probably better to just redirect to login.
We'd only want to trigger the prompt for API calls