ensureAuthenticated redirect fix

In ensureAuthenticated, should be res.redirect('/login')