not_authenticated is now being used as the action if require_login deter...

...mines a user is not logged in. this allows for custom login pages and paths