set redirect if trying to auth without token