User is None if not authenticated
Redirect to login when action need authentication