gotta redirect to login url if no user