actually redirect when already authenticated on /login