ensureLoggedIn correct redirection