Add cap check to login_redirect filter. Bounce unauthorized users to a filterable URL.