redirect to login per javascript on session timeout