redirects if no cookies