redirects to login if user is not logged in