redirect to login page when user did not login and want to create new session