all get requests redirect to login page if user is not logged in