added redirect to login if authenticate is accessed without a code url param