redirect to 'login' when trying to get on login page