update acl enforce for auto redirect once logged in