add login check,redirect