/login route now redirects if already signed in...