redirect to login page rather than back to the calling site if user isn't logged in [MS-923]

All tests pass.