prevent redirect loop for non-authenticated users