get automatic login redirects working alongside the whoami service to transparently redirect users to the annotation service login page and back to their original site again after they login
add todo note to only do redirect for unauthenticated response