redirect to login if you arent logged in, with an openid incoming auth request