redirect direct visitors of index to login

e.g. without referer
some layout changes for upload