add LOGIN_URL to settings.py